Static task
static1
Behavioral task
behavioral1
Sample
ef244af9cb7ad330796ae0cfb9f9ca55_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ef244af9cb7ad330796ae0cfb9f9ca55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef244af9cb7ad330796ae0cfb9f9ca55_JaffaCakes118
-
Size
325KB
-
MD5
ef244af9cb7ad330796ae0cfb9f9ca55
-
SHA1
2dd8c514d1e99fc0d9dfee78c53eda7430b6fb30
-
SHA256
35c4838cdef52c7b60b96da9050b9aa10336564ce6f2f8bc743ea147b34a3729
-
SHA512
1614ab3ef2eb74f2ea6c047b3d583a1b3aa8d6858be70ba8f6b6b8c6b4287035bf57f598a8c672b6781acd28a8137d70d8152dee7482e4713d7ae3b9b159e85d
-
SSDEEP
6144:Dsj9oSjfEJtJCmfqskiQ+NKm3HEn0cLjDCe9gULGOxCP7icsViDG:DaiJCdskqNU0cPuehLpOVG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef244af9cb7ad330796ae0cfb9f9ca55_JaffaCakes118
Files
-
ef244af9cb7ad330796ae0cfb9f9ca55_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ